diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2023-12-16 14:25:55 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-16 14:25:55 +0200 |
| commit | e8282aa4f7e675d1189864799940c9a1b097601c (patch) | |
| tree | e77b8eb4aee6b40a156472417b52f2a620284094 /data/templates | |
| parent | 357123273c808ddec77b097d47231e3301ee5731 (diff) | |
| parent | 1c82e661e04e0979e09e487a58a801ffa9f438e8 (diff) | |
| download | vyos-1x-e8282aa4f7e675d1189864799940c9a1b097601c.tar.gz vyos-1x-e8282aa4f7e675d1189864799940c9a1b097601c.zip | |
Merge pull request #2644 from c-po/ocserv-T5796
ocserv: T5796: add CLI knob "http-security-headers"
Diffstat (limited to 'data/templates')
| -rw-r--r-- | data/templates/ocserv/ocserv_config.j2 | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/data/templates/ocserv/ocserv_config.j2 b/data/templates/ocserv/ocserv_config.j2 index 80ba357bc..b5e890c32 100644 --- a/data/templates/ocserv/ocserv_config.j2 +++ b/data/templates/ocserv/ocserv_config.j2 @@ -121,12 +121,12 @@ select-group = {{ grp }} {% endfor %} {% endif %} - +{% if http_security_headers is vyos_defined %} # HTTP security headers included-http-headers = Strict-Transport-Security: max-age=31536000 ; includeSubDomains included-http-headers = X-Frame-Options: deny included-http-headers = X-Content-Type-Options: nosniff -included-http-headers = Content-Security-Policy: default-src ´none´ +included-http-headers = Content-Security-Policy: default-src "none" included-http-headers = X-Permitted-Cross-Domain-Policies: none included-http-headers = Referrer-Policy: no-referrer included-http-headers = Clear-Site-Data: "cache","cookies","storage" @@ -136,3 +136,4 @@ included-http-headers = Cross-Origin-Resource-Policy: same-origin included-http-headers = X-XSS-Protection: 0 included-http-headers = Pragma: no-cache included-http-headers = Cache-control: no-store, no-cache +{% endif %} |